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SYSTEMS AND METHODS FOR PREVENTING UNAUTHORIZED USE OF 
ROAMING NUMBERS IN A WIRELESS TELECOMMUNICATIONS SYSTEM 



TECHNICAL FIELD OF THE INVENTION 

[0001] The present invention is directed, in general, to communications 
systems and, more specifically, to apparatus, systems and methods to prevent 
unauthorized use of roaming numbers in a wireless telecommunications system. 

BACKGROUND OF THE INVENTION 

[0002] The world is currently experiencing revolutionary changes in 
communications systems, brought about, in part, by the general availability and 
evolution of wireless telephony systems. Immediately after the first mobile user 
headed off into the sunset with a cellular telephone, or Mobile Station (MS), 
however, someone else wondered where they went. Unlike conventional wireline 
telephones, wireless callers are not usually associated with a fixed location, which 
provides many benefits such as freedom of use over large geographical areas. 
Because the location of a MS is usually not fixed, it is necessary for the wireless 
telephony system to be able to determine where the MS is located so that calls can 
be properly routed to it. 

[0003] In order to route a call to a MS that is outside of the home area of the 
subscriber's service provider, a roaming number must be used. When a call is made 
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to a MS, a Gateway Mobile Switching Center (GMSC) sends a query to a Home 
Location Register (HLR) to determine how to route a call to the MS. The HLR keeps 
track of the approximate location of the MS within the wireless telephony network. 
The HLR requests a roaming number from the Mobile Switching Center serving the 
geographical area in which the MS is currently located. The HLR fonA^ards the 
roaming number to the GMSC, which then uses the number to setup the call toward 
the serving MSC. 

[0004] Roaming numbers are a MSC switch property; they belong to the 
MSC. Roaming numbers are public network numbers and are associated with a 
specific MSC; /.e., a call to a roaming number will always be routed to a specific 
MSC. Network operators assign a particular set of roaming numbers to each MSC 
switch so that terminating calls to a MS served by the MSC can be completed using 
one of the MSC's associated roaming numbers. The public network, e.g., the Public 
Switched Telephone Network (PSTN) or the Public Land Mobile Network (PLMN), 
uses a routing mechanism that routes calls to a particular MSC when a roaming 
number associated with that MSC is allocated to a call request to a MS within the 
service area of the MSC. A call setup request to a roaming number associated with 
a MSC is performed in the same manner as any ordinary call. 
[0005] Because a call setup request to a roaming number is performed in the 
same manner as any ordinary call, it is possible for any person who discovers the 
roaming numbers associated with a MSC to place malicious calls to one or more of 
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the roaming numbers associated with each MSG within a wireless networl^. A 
conventional MSG does not have any mechanisms to ensure that an incoming call 
request is, in fact, associated with a call request to a MS within the service area of 
the MSG. Accordingly, there is a need in the art for systems and methods to prevent 
unauthorized use of roaming numbers in a wireless telecommunications system. 
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SUMMARY OF THE INVENTION 

[0006] To address the above-discussed deficiencies of the prior art, the 
present invention provides systems and methods related to preventing unauthorized 
use of roaming numbers in a wireless telecommunications system. 
[0007] Upon receipt of a call request for a mobile terminal at a Gateway 
Mobile Switching Center (GMSC), the GMSC queries a Home Location Register 
p (HLR). The HLR requests a roaming number for the mobile tenninal from a Mobile 
Switching Center (MSG). The MSG allocates a roaming number for the mobile 

m 

^ tenninal, assigns an authentication code, and sends to the HLR. The HLR receives 

iri 

p the roaming number and authentication code and relays to the GMSG, The GMSG 

n I sends a call setup request to the MSG; the call setup request includes the roaming 

£ number and the authentication code. The MSG confirms the authentication code 

M' and, if the authentication code for the roaming number is confirmed, completes the 

call request to the mobile terminal. The use of an authentication code can prevent 
attacks on MSG resources by the unauthorized use of roaming numbers. 
[0008] The authentication code assigned to a roaming number for a particular 
call can be dynamically selected. Various methods known in the art for creating 
random codes can be used. In some embodiments, the authentication code can be 
a function of the roaming number, the time at which the roaming number is 
requested, and/or, the date on which the roaming number is requested. The 
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principles of the invention are not limited to any particular method for selecting or 
calculating an authentication code. 

[0009] The methods disclosed herein for preventing unauthorized use of 
roaming numbers in a wireless telecommunications system depend on the 
adaptation of particular nodes within a wireless telecommunications system. These 
nodes include a Gateway Mobile Switching Center (GMSC), a Home Location 
Register (HLR). and a Mobile Switching Center (MSC). 

[0010] An MSC, adapted to prevent unauthorized use of roaming numbers 
in accordance with the principles disclosed herein, is operative to: receive a request 
for a roaming number from a Home Location Register (HLR) associated with a 
mobile terminal located within the geographical service area of the MSC; allocate 
a roaming number for the mobile terminal; assign an authentication code to the 
roaming number; send a response to the request for roaming number to the HLR, 
wherein the response includes the roaming number and the authentication code, 
and the HLR relays the roaming number and the authentication code to the GMSC 
that has received a call request for the mobile terminal; receive a call setup request 
from the GMSC, wherein the call setup request includes the roaming number and 
the authentication code; confirm the authentication code in the call setup request; 
and, if the authentication code for the roaming number is confirmed, complete the 
call request to the mobile terminal. 
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[001 1] A GMSC, adapted to prevent unauthorized use of roaming numbers 
in accordance with the principles disclosed herein, is operative to: receive a call 
request for a mobile; send a request for routing information to HLR associated with 
the mobile terminal, wherein the request for routing information causes the HLR to 
send a request for a roaming number to the MSG associated with the roaming area 
in which the mobile terminal is geographically located, and wherein the request for 
a roaming number causes the MSG to allocate a roaming number for the mobile 
terminal, assign an authentication code to the roaming number, and send a 
response to the request for roaming number to the HLR, the response including the 
roaming number and the authentication code; receive the roaming number and the 
authentication code from the HLR; send a call setup request to the MSG, wherein 
the call setup request includes the roaming number and the authentication code, 
and wherein the MSG completes the call request only upon confimriing the 
authentication code for the roaming number, 

[0012] An HLR, adapted to prevent unauthorized use of roaming numbers in 
accordance with the principles disclosed herein, is operative to: receive a request 
for routing infomiation from a GMSG, the request for routing infonnation identifying 
a mobile temriinal associated with the HLR for which the GMSG has received a call 
request; send a request for a roaming number to MSG associated with the roaming 
area in which the mobile tenninal is geographically located, wherein the request for 
a roaming number causes the MSG to allocate a roaming number for the mobile 
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terminal, assign an authentication code to tfie roaming number, and send a 
response to tlie request for roaming number to tfie HLR, the response including the 
roaming number and the authentication code; receive the roaming number and the 
authentication code from the MSC; send the roaming number and the authentication 
code to the GMSC, whereupon the GIVISC can send a call setup to the MSC, the 
call setup request including the roaming number and the authentication code, 
wherein the MSC completes the call request only upon confirming the authentication 
code for the roaming number. 

[0013] The foregoing has outlined, rather broadly, the principles of the 
present invention so that those skilled in the art may better understand the detailed 
description of the exemplary embodiments that follow. Those skilled in the art 
should appreciate that they can readily use the disclosed conception and exemplary 
embodiments as a basis for designing or modifying other stmctures and methods 
for carrying out the same purposes of the present invention. Those skilled in the art 
should also realize that such equivalent constructions do not depart from the spirit 
and scope of the invention in its broadest form. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

[0014] For a more complete understanding of the present invention, 
reference is now made to the following detailed description taken in conjunction with 
the accompanying drawings, in which: 

[0015] FIGURE 1 illustrates a signaling diagram of a prior art system for 
providing a roaming number for a mobile terminal in a wireless telecommunications 
network; 

[001 6] FIGURE 2 illustrates a signaling diagram for an exemplary system to 
prevent unauthorized use of roaming numbers in a wireless telecommunications 
system in accordance with the principles of the present invention; and 
[001 7] FIGURE 3 illustrates an exemplary flowchart of a method to prevent 
unauthorized use of roaming numbers in a wireless telecommunications system in 
accordance with the principles of the present invention. 
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DETAILED DESCRIPTION 

[001 8] Referring to FIGURE 1 , illustrated is a simplified signaling diagram of 
a prior art system 100 for providing a roaming number for a mobile tenninal 120 
subscribed to a wireless telecommunications network 130. The wireless 
telecommunications network 130, or Public Land Mobile Network (PLMN), 
conventionally includes a Gateway Mobile Switching Center (GMSC) 131, at least 
one Mobile Switching Center (MSC) 132 coupled to the GMSC through the Public 
Switched Telephone Network 140, at least one Base Station Subsystem (BSS) 133 
coupled to each MSC 132, and a Home Location Register (HLR) 134. 
[001 9] Using a telephony device 111, such as a conventional telephone or 
a wireless tenninal, a call request directed to a mobile device 120 is routed to the 
GMSC 131; the call request includes a unique identifier of the mobile device 120, 
such as a Mobile Station Integrated Service Digital Network (MSISDN) number. The 
GMSC 131 then sends an inquiry, e.g., Send_RoutingJnformation, to a location 
resource, e.g., HLR 134, to detennine the location of the mobile device 120 having 
the unique identifier. The HLR 134 queries a database using the unique identifier, 
wherein the database includes an association between the unique identifier and the 
serving node, e.g., MSC 132, of the wireless telecommunications network 130 in 
communication with the mobile device 120. The HLR 134 then sends a request, 
e.g., Provide_Roaming_Number, to the MSC 132 to obtain a roaming number, e.g., 
a Mobile Subscriber Routing Number (MSRN), for the mobile device 120. The MSC 
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132 responds to the Provide_Roaming_Number request by allocating a roaming 
number for the mobile terminal 120 for the particular call request and sending the 
roaming number to the HLR 134. The HLR 134 sends the MSRN to the GMSC 131, 
which uses the MSRN to route the call request to the MSG 132 through the PSTN 
140. The MSG 132 completes the call to the mobile device 120 through the proper 
BSS 133 in communication with the mobile device 120. 

[0020] As noted previously, however, a problem with roaming numbers 
associated with a MSG is that such numbers may become known to persons that 
may seek to interfere with the operation of the wireless network. For example, 
telephony device 1 1 1 could be a computer having a modem. A malicious user could 
program the computer to continuously dial one or more roaming numbers 
associated with MSG 132, thus interfering with the allocation of roaming numbers 
by MSG 132 to valid calls directed to mobile terminals, such as mobile terminal 120. 
The invention disclosed herein overcomes this problem. 
[0021] Tuning now to Figure 2, Illustrated is a signaling diagram for an 
exemplary system 200 to prevent unauthorized use of roaming numbers in a 
wireless telecommunications system in accordance with the principles of the 
present invention. As in Figure 1, the wireless telecommunications network 230 
includes a Gateway Mobile Switching Genter (GMSG) 231, at least one Mobile 
Switching Genter (MSG) 232 coupled to the GMSG through the Public Switched 
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Telephone Network 140, at least one Base Station Subsystem (BSS) 133 coupled 
to each MSG 232, and a Home Location Register (HLR) 234. 
[0022] Using telephony device 111, such as a conventional telephone or a 
wireless terminal, a call request directed to a mobile device 120 is routed to the 
GMSC 231 ; the call request includes a unique identifier of the mobile device 120, 
such as a Mobile Station Integrated Service Digital Network (MSISDN) number. The 
GMSC 231 then sends an inquiry, e.g., Send_RoutingJnformation, to a location 
resource, e.g., HLR 234, to determine the location of the mobile device 120 having 
the unique identifier. The HLR 234 queries a database using the unique identifier, 
wherein the database includes an association between the unique identifier and the 
serving node, e.g., MSG 232, of the wireless telecommunications network 230 in 
communication with the mobile device 120. The HLR 234 then sends a request, 
e.g., Provide_Roaming_Number, to the MSG 232 to obtain a roaming number, e.g., 
a Mobile Subscriber Routing Number (MSRN), for the mobile device 120. 
[0023] The MSG 232 includes functionality to provide assignment and 
confirmation of a roaming number authentication code. The authentication code 
assigned to a roaming number for a particular call can be dynamically selected. 
Various methods known in the art for creating random codes can be used. In some 
embodiments, the authentication code can be a function of the roaming number, the 
time at which the roaming number is requested, and/or, the date on which the 
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roaming number is requested. The principles of the invention are not limited to any 
particular method for selecting or calculating an authentication code. 
[0024] Once the MSG 232 has allocated a roaming number and assigned it 
an authentication code, the roaming number and authentication code are sent to the 
HLR 1234. The HLR 234 relays the roaming number and authentication code to the 
GMSC 231. The GMSC 231 then sends a call setup request to the MSG 232, 
including the roaming number and the authentication code; the call setup request 
can be sent, for example, using a Signaling System 7 (SS7) network associated with 
the PSTN 140. When the MSG 232 receives the call setup request, it confirms that 
the received authentication code is the proper code for the received roaming 
number. If the authentication code is connect, the MSG 232 completes the call setup 
request, and communication is established between the telephony device 1 1 1 and 
mobile terminal 120. 

[0025] Turning now to Figure 3, illustrated is an exemplary flowchart 300 of 
a method to prevent unauthorized use of roaming numbers in a wireless 
telecommunications system in accordance with the principles of the present 
invention. The method 300 can be embodied in software, hardware, or a 
combination thereof, within the computer processing systems associated with 
GMSG 231 , HLR 234 and MSG 232. 

[0026] In a step 310, a call request for a mobile terminal is received at 
GMSG. In a step 320, the GMSG queries a Home Location Register HLR for routing 
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information for the mobile terminal. In a step 330, the HLR requests a roaming 
number for the mobile terminal from the MSG within the geographical area in which 
the mobile terminal is currently located. In a step 340, the MSG allocates a roaming 
number for the mobile terminal, assigns an authentication code, and sends to the 
HLR. In a step 350, the HLR receives the roaming number and authentication code 
and relays to the GMSG, In a step 360, the GMSC sends a call setup request to the 
MSG; the call setup request includes the roaming number and the authentication 
code. In a step 370, the MSG confirms the authentication code and, if the 
authentication code for the roaming number is confinmed, completes the call request 
to the mobile terminal (Step 380); othenA/ise, the MSG rejects the call setup request 
(Step 390). 

[0027] From the foregoing, those skilled in the art will recognize that the 
present invention advances the state of the art of communications systems, 
providing systems and methods related to preventing unauthorized use of roaming 
numbers in a wireless telecommunications system. Although the present invention 
has been described in detail, those skilled in the art will conceive of various 
changes, substitutions and alterations to the exemplary embodiments described 
herein without departing from the spirit and scope of the invention in its broadest 
fomri. The exemplary embodiments presented herein illustrate the principles of the 
invention and are not intended to be exhaustive or to limit the invention to the form 
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disclosed; it is intended that the scope of the invention only be limited by the claims 
appended hereto, and their equivalents. 
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